remove csrf, fix directives module and add markdown requirement