Properly set a csrf token for nin wizard