results page progress

csrf & querystring improvements; page doesn't load yet.