Added CSRF support for all the forms.

A couple of folks requested CSRF support, I've added it to all the forms in the app. I believe the set token could be moved to your view-helpers npm but I didn't wanted to make two pull requests.

Let me know if you want to submit it to the other your other repo and I'll make the arrangements.