fixed applying the useCSRF setting to the app settings