fix CSRF token check for deposit process