incorrect csrf parameter on milestone sort