missing CSRF on url, now added
Merge branch 'develop' into testing