solving csrf problems