csrf protection

csrf protection for developers
remove "are"