CSRF Token + hotfix + UserBug

refer to #46
https://github.com/danpros/htmly/issues/46