bug caching csrf and language