[OE-2470] fixed waiting list with CSRF enabled.
[OE-2470] CSRF bugfixes