try catch converting id to object id
do null check on csrf token in smoke test
null check user in logging
added next into controller for error
added null check to compile features
try catch encodeURIComponent
return done in smoke test