fix CsrfFilter factory