fix userprofile forms

add {% csrf_token %} to forms