fix delete in list related to 'csrf token'