fix missing csrf metaTags