Put csrf token on page, not sure if this helps