added csrf_token tag, deployment tweaks