csrf protect in home app
new login template in auth app