Use a random token and verify it on POST requests
Add CSRF token into signin view