Add CSRF to login form