Check if req.query._csrf > check GET