Replaced the CSRF-token with the Magic-token