Add CSRF tokens in badge edit forms (Fixes #268)