added a param to enable json protection
fixed XSRF bug
forgot to add the following files to the angular update