basic upgrade support from dash
add csrf protection and correct commit behinds