added csrf token to search form