update dependencies, implement CSRF fix, issue #3