more infos on index page
cookies for inline vars
csrf form in navbar
csrf for profile page
jquery cookie