added csrf meta tags