Fixed bug with csrf token.