CSRF all post, put, patch, delete routes
styled and updated login page