Fix CSRF_TOKEN constant in adminpage