commit to ensure csrf cookie