- unvendor dropzone and upgrade it from 4.2.0 to 5.7.0 - make `csrf` available on window.config
public/vendor