added CSRF token
fixed bug in step counter when there are no steps
updated tests for CSRF token
updated helpMessage to be visible by default