action existence checked
csrf token existence checked
nearly project reset, but finally just removed timeline & hugely improved laziness (evolution, not revolution)!