Simplified adding svg and h2 dynamically, fixed CSRF bug