Change the order in which CSRF and Auth Routing is done

closes #2171
- CSRF validation is made after the middleware auth api
- Shows correct message for 'Please Sign In'