fix issue related to csrf for service action