I give up on csrf, way to hard to get working