add csrf, captcha and honeypot fields