Add CSRF protection to object actions (Delete, Edit) and batch actions.