fix image upload by passing in csrf tokens