fix csrf ignore action