Updating to always sent csrf tokens via post