[OE-2470] fixed CSRF bug