Make CSRF checks more flexible
Bump dependency