fixed fonts, csrf, view logging