CSRF Token + hotfix + LoginBug

refer to #46
https://github.com/danpros/htmly/issues/46