Fix CSRF
Bring back before_filter