removed csrf spring security and added javascript ajax features