Global Csrfs DoubleValue

Still need to:
- implement this in javscript (set header for all post requests)
- set correct csrf in getAuthUrl