Page controller fix for locations and removed forgery clause from app controller