Attempt to force csrf headers