added a few things
fixed the way csrf is loading