Add CSRF checks to user-edit page