update firefox addon to send csrf and url