added filter to remove csrf in the base controller