cleaned up controls, fixed bug where CSRF field wasn't displaying