clean up pages that use csrftokens