fixed CSRF token issues