set_xsrf_cookie_for_page: data may be bytes (js error gif) which cannot convert to unicode
put js scripts right before the last </body>