fixed exception: The option "csrf_protection" does not exist