fonts updated and ajaxSetup (csrf), minor design glitches