Add token_required and get current user in form