Enables CSRF
Removes ~ prefix, shortening all URLs by one character