Added CSRF to forms and ajax requests