Fix csrf definition