fix #242 sms_sync locked by CSRF (thx to guyt101z)