Revert protect_from_forgery remove (my bad)