remove test csrf route
Implement really old redirects