implemented csrf tokens on applicable forms