Fixed csrf filter vulnerability