keep CRSF token for multiple requests