csrf验证,logout,fix bugs