csrf is part of the form. With the line i took out is a duplicate.