Fixing auth issues and adding csrf support for all controllers