Fixed csrf bugs and modal click bug on property