CSRF in Config

*Will need to revisit this when using AJAX