adding index.html
added csrf js