compare query string when highlighting sidebar links
fix formatting
use 403 when csrf token is invalid