rolled 3rd party csrf class into eatStstic to avoid messing around with external dependencies (might rewrite later)