Added route to get csrf token for dev