CSRF tokens for ALL the forms

Added CSRF Tokens to `<form>`s.