redefines routes, builds out some star functionality, allows embeded CSRF tokens in remote forms