Added CSRF to all post requests