Fixed csrf requests