Form validation, create-edit in forms, csrf-token