fix
fix for first release

* add csrf protection
* add about page and terms page