generate token
disable csrf
disable csrf
changed default redis db