add CSRF links