Allow everything but slash in keywords, don't csrf them, doesn't work with selectize.js, need to find out why