Update IndexController.php

Added CSRF check on forms