added csrf tokens to project members add/remove