Fixing CSRF Forbidden bug