adding csrf token to checklists