more attempts to add security features -> trying to add CSRF token to incoming post requests