fixed it so that you don't get points for CSRF errors