added form tokens and deleted htmlpurifier