added popups to markers and fixed csrf token problem