removing quick hacking on CSRF warning