trying to figure out this csrf library