add csrf to blog and category form
removed comments
added archive route, action and tests
add test for getting setting options