added bleach attributes setting
two missing csrf tokens added