Added csrf token to sessions