enable xsrf
remove topic & reply via ajax