implemented CSRF token using double submit cookies method