trying to solve the csrf stuff