added empty csrf class, refs #147