Swapping out CSRF dev key