Update CSRF protection