Fixed CSRF token not being sent on POST request