GUI-545
added csrf checks to delete and 2 policy ops that were missing it