Making sure csrf secret is not generated multiple times initally by multiple requests inside non blocking callback