diff --git a/Admin/Routes/Web/Api.php b/Admin/Routes/Web/Api.php
index 1202184..a208bac 100755
--- a/Admin/Routes/Web/Api.php
+++ b/Admin/Routes/Web/Api.php
@@ -22,6 +22,7 @@ return [
         [
             'dest'       => '\Modules\Tag\Controller\ApiController:apiTagCreate',
             'verb'       => RouteVerb::PUT,
+            'csrf'       => true,
             'permission' => [
                 'module' => ApiController::NAME,
                 'type'   => PermissionType::CREATE,
@@ -31,6 +32,7 @@ return [
         [
             'dest'       => '\Modules\Tag\Controller\ApiController:apiTagUpdate',
             'verb'       => RouteVerb::SET,
+            'csrf'       => true,
             'permission' => [
                 'module' => ApiController::NAME,
                 'type'   => PermissionType::MODIFY,
@@ -40,6 +42,7 @@ return [
         [
             'dest'       => '\Modules\Tag\Controller\ApiController:apiTagDelete',
             'verb'       => RouteVerb::DELETE,
+            'csrf'       => true,
             'permission' => [
                 'module' => ApiController::NAME,
                 'type'   => PermissionType::DELETE,
@@ -51,6 +54,7 @@ return [
         [
             'dest'       => '\Modules\Tag\Controller\ApiController:apiTagFind',
             'verb'       => RouteVerb::GET,
+            'csrf'       => true,
             'permission' => [
                 'module' => ApiController::NAME,
                 'type'   => PermissionType::READ,
@@ -62,6 +66,7 @@ return [
         [
             'dest'       => '\Modules\Tag\Controller\ApiController:apiTagL11nCreate',
             'verb'       => RouteVerb::PUT,
+            'csrf'       => true,
             'permission' => [
                 'module' => ApiController::NAME,
                 'type'   => PermissionType::READ,
@@ -71,6 +76,7 @@ return [
         [
             'dest'       => '\Modules\Tag\Controller\ApiController:apiTagL11nUpdate',
             'verb'       => RouteVerb::SET,
+            'csrf'       => true,
             'permission' => [
                 'module' => ApiController::NAME,
                 'type'   => PermissionType::READ,
diff --git a/Theme/Backend/Components/TagSelector/base.tpl.php b/Theme/Backend/Components/TagSelector/base.tpl.php
index bc1b23f..e9bc373 100755
--- a/Theme/Backend/Components/TagSelector/base.tpl.php
+++ b/Theme/Backend/Components/TagSelector/base.tpl.php
@@ -14,7 +14,6 @@
             ]' formaction=""><i class="g-icon">book</i></button>
             <div class="advIpt wf-100" id="<?= $this->id; ?>">
                 <input autocomplete="off" class="input" type="text" id="i<?= $this->id; ?>"
-                    placeholder="Guest"
                     data-emptyAfter="true"
                     data-autocomplete="off"
                     data-src="api/tag/find?search={!#i<?= $this->id; ?>}">
diff --git a/Theme/Backend/tag-create.tpl.php b/Theme/Backend/tag-create.tpl.php
index 12c298c..d5fca9d 100755
--- a/Theme/Backend/tag-create.tpl.php
+++ b/Theme/Backend/tag-create.tpl.php
@@ -19,12 +19,12 @@ echo $this->data['nav']->render(); ?>
 <div class="row">
     <div class="col-xs-12 col-md-6">
         <div class="portlet">
-            <form id="fUnitCreate" method="put" action="<?= UriFactory::build('{/api}tag'); ?>">
+            <form id="fUnitCreate" method="put" action="<?= UriFactory::build('{/api}tag?csrf={$CSRF}'); ?>">
                 <div class="portlet-head"><?= $this->getHtml('Tag'); ?></div>
                 <div class="portlet-body">
                     <div class="form-group">
                         <label for="iTitle"><?= $this->getHtml('Title'); ?></label>
-                       <input type="text" name="title" id="iTitle" placeholder="oms" required>
+                       <input type="text" name="title" id="iTitle" required>
                     </div>
 
                     <div class="form-group">
@@ -34,7 +34,7 @@ echo $this->data['nav']->render(); ?>
 
                     <div class="form-group">
                        <label for="iIcon"><?= $this->getHtml('Icon'); ?></label>
-                       <input type="text" name="icon" id="iIcon" placeholder="oms" value="<?= $this->printHtml($tag->icon); ?>">
+                       <input type="text" name="icon" id="iIcon" value="<?= $this->printHtml($tag->icon); ?>">
                     </div>
                 </div>
                 <div class="portlet-foot">
diff --git a/Theme/Backend/tag-view.tpl.php b/Theme/Backend/tag-view.tpl.php
index c102a97..d3d45b4 100644
--- a/Theme/Backend/tag-view.tpl.php
+++ b/Theme/Backend/tag-view.tpl.php
@@ -22,7 +22,7 @@ echo $this->data['nav']->render(); ?>
 <div class="row">
     <div class="col-xs-12 col-md-6">
         <div class="portlet">
-            <form id="tagForm" method="POST" action="<?= UriFactory::build('{/api}tag'); ?>"
+            <form id="tagForm" method="POST" action="<?= UriFactory::build('{/api}tag?csrf={$CSRF}'); ?>"
                 data-ui-container="#tagTable tbody"
                 data-add-form="tagForm"
                 data-add-tpl="#tagTable tbody .oms-add-tpl-tag">
@@ -35,7 +35,7 @@ echo $this->data['nav']->render(); ?>
 
                     <div class="form-group">
                         <label for="iIcon"><?= $this->getHtml('Icon'); ?></label>
-                        <input type="text" name="icon" id="iIcon" placeholder="" value="<?= $this->printHtml($tag->icon); ?>">
+                        <input type="text" name="icon" id="iIcon" value="<?= $this->printHtml($tag->icon); ?>">
                     </div>
                 </div>
 
@@ -52,7 +52,7 @@ echo $this->data['nav']->render(); ?>
     <?= $this->data['l11nView']->render(
         $this->data['l11nValues'],
         [],
-        '{/api}tag/l11n'
+        '{/api}tag/l11n?csrf={$CSRF}'
     );
     ?>
 </div>
\ No newline at end of file