form cleanup
added csrf filter on auth controller
refactored counts, added comment count