Add angular csrf and fix sign in/out