Csrf token is now in a seperated file #23.