implemented TinyMCE editor, fixed csrf_token validation errors