CSRF typo fix + money save method fix