Ditched the csrf middleware - moved to the kernel