added csrf settings to the security config file