Fix CSRF filter