remove empty dependency array from csrf module definition