quick fix to get around csrf tokens for posts