csrf in upgrade
increment logs