Updating csrf token but leaving backwards compatibility