Update csrf-magic to 1.0.4