udpated csrf token to conventional name