added csrf token middleware
release 0.2.11