add logger to views.py
unchecked csrf