add csrf protect, change default markers on map