Added CSRF to all the forms.

Express comes with built in CSRF support. I then used the express
locals middleware to add a variable called csrf_token to the views.