assign, don't merge! flash
enable authenticity token