fixed: csrf token is const
Merge pull request #437 from cuongth/boss_branch

fixed: csrf token is const