Fix CSRF on main page