- fixes to signup form csrf token.  now you can sign up!