enable csrf for editing posts