Fixed CSRF validation on form submit