add csrf protection to generated menu items