fix csrf
Update build sample script and clear target cookie when login