register csrf filter to add comment - fix #8