show recently added
csrf, ui tweaks, middleware