Order _csrf protection and libraries update.