CSRF tokens and autologin