added vetheroes.co to csrf