Add CSRF filter for methods