Fix csrf for ajax, template profile and update some packages