changing renderer url
csrf support and adding new url