fixed cores routing and removed CSRF token if cores