added csrf and search box