re-enabled csrf protection