Simpler CSRF query-string value