Fixing csrf token placement