Will this send a csrf token? It will need to.