fixed csrf issue on edit/delete invoice