fix elfinder
remove not needed csrf