Fix CSRF token cookie name