clirec lcundrawnbal action: fixed csrf bug.