Fix CSRF token authenticity for users controller