fixed a bug
When the server was restarted the sekret, used as part of the session, would be reset. this resulted in posts, that would try and read the csrf token crashing, until a page was requested through a get. very edge case, but the emails on errors were getting annoying.