fix restore process for 'csrf token' (change 'get' to 'post')