updates to validations and csrf