fix CMFPlacefulWorkflow
add more checkouts for csrf plip