Re-enabled csrf protection