Create history.md
fix bug
modify token to req.csrfToken()
Merge branch 'master' into send-register-email