fixing CSRF issue, jquery was being loaded twice - probably messed up cookies