Make it work with '_csrf' parameter