changed the csrf filter and added it to some route groups.