config changed
route file updated
csrf protection added to routes