completing support for xsrf tokens. still need to add a middleware to verify tokens

Signed-off-by: Chris <campbel@Chriss-MacBook-Pro.local>