fix profile edit with csrf element