Added csrf cookie to request headers