add the CSRF but need back to working version
add the CSRF to all the form
add the CSRF to all the form