edited email controller
exception for csrf