update dashboard
update models
add url to account.json
fix csrf check method