Fixed incorrect CSRF token check