handlebars and csrf support