fix CSRF, fully implement create action
Merge pull request #14 from DerekMaffett/generalized_bug_cleanup

fix CSRF, fully implement create action