Added CSRF support for all the forms.

A couple of folks requested CSRF support, I've added it to all the forms in the app. I believe the set token could be moved to your view-helpers npm but I didn't wanted to make two pull requests.

Let me know if you want me to submit an extra to your other repo and I'll make the arrangements. 

This fixes #28