added csrf config for share