bugs fixed And CSRFProtector js init