added jquery cookie
enabled csrf middleware
disabled csrf temporarily
added csrf protection