fix issue with tag not found
add session system with csrf functionality