Fix csrf, bump version