FIX: XSRF handling in http