Add CSRF to the login.