added a template test, csrf plugin