add central function to add and verify the csrfGetToken