restore CSRF on edit document template