adding a tool to compute a hash for a mail + fixing csrf (for good)