add csurf as a dependency