Fixing the csrf on login