csrf i customfields