fixing csrf issue & added more links in admin console