CSRF token authenticity fix