csrf authenticity and google analytics