CSRF with setting the buffer back after reading _csrf token