fix auto csrf protection integration