fix convert template: replace double quotes to sigle and add csrf_token