fixed requirements file
playing with csrf_token bullshit
uncommented middleware