added csrf support

csrf support (small change)