- added csrf for ajax calls
- added colorpicker for shape color
- fixed svg display bug when shape fits bounds too well -> edges overlap to other side