adding csrf expections for xlsform
Fixing css and disabling logging