fixing all the bugs I made introducing CSRF protection