Adding a default location and removing the csrf token