..
fixed csrf issue
removed unnecessary fields