(#17) - add csrf token for search