Fixed anti-CSRF bug