fixing CSRF filters