removed unused file, added csrf check