removed csrf protection from favorites due to cache.
need to revisit csrf token for cart add