fixed xsrf issues removed unneeded requirements