Quick bug fix.
Added CSRF filter on all post, delete and update routes
Just a bit of cleanup
Changed path to work on cloud as well as local