add run form changes + temporary avoid CSRF changes for POST