fixed dynamic csrf bug
added data migration fixture