fix csrf token config in angular