0.0.1
don't blow away csrf token, beautified JS