fixing CSRF in agora or election comments