Dealing with CSRF protection