Add csrf token with http requests