Add whitelisted CSRF URI