XSRF middleware added