CSRF Protection

- [ ] Settings form
- [ ] Sign form