Fix so that getCSRF always returns csrf