csrf

Changes to GET /api/csrf

get/api/csrf