WIP better file upload csrf not working anymore