bug fixed csrf missing on task call