impl csrf filter and admin identifier support