Adding CSRF protection on social-auth URLs