Insert csrf manually because build broken