Add CSRF protection with token reset each request finish successful