removed csrf meta