Add hidden tags with CSRF field to forms