Bring back csrf support