Almost finished CSRF configuration