enabled login redirect for server-side auth
added csrf token support
Merge branch 'develop'