User groups working, added csrf tags