CSRF Protection

- [x] Settings form
- [x] Sign form