working with CSRF
temporary solution for CSRF problem - turning off CSRF. TODO turn it on!
homeController to options http requets added