Fixed csrf clientside post