changed variable name in csrf token block