[WIP-106] fixed bug with CSRF token