Allow-Cross-Origin Domain to access /verify

add the CSRF middleware to the post requests here