Update CSRF middleware