quick fix for csrf_token assigment in Q