Fix for csrf checking covers post and get nonces