removed csrf, cleaned up views with no posts