* optional csrf token name * fix regression when selecting all projects as super user * prevent invalid sql