if defined, add csrf token to any form with POST method
small tweaks
Merge branch 'fix-search' into closeio