some fixes for better compatibility with WB; fixed upload (media section); added csrf token to addons page