fix index handler bug for xsrf