removed the csrf meta tag in main app page