match youtube code with option &... args
removed csrf_token
disable CSRF
added WTF_CSRF_ENABLED flag
rmeoved csrf_token
removed csrf_token