Fixing a bug with the csrf tokens