fixed possible problem with csrftoken from cookie