CSRF Fix, token was undefined