removed errant csrfToken() call
release 0.2.14