Add csrf token to avoid CSRF attacks