Fix csrf-token for image upload