version bump for new CSRF stuff