fix kibana csrf warnings, hide elasticsearch port