fixed the login issues with csrf again