flatiron using csrf, seems like when using flatiron-passport csrf is not working since its override most of the functions