Use csrf token on bio update request