Fixed minor issue where csrf token was being added to a GET form