We need the csrfToken.