updated csrf tokens, added token validation script and form protection module