Add anti-forgery tokens to both forms