fixed worker delete csrf thing I stubbed earlier
took to field out of the rest of the login forms