add csrf token verification before deleting a project