Raise exception when CSRF token isn't valid

@markijbema