Bugfix: when anonymous submits translation, CSRF fails