Fix CSRF for Contact Widgets