Add CRSF middleware for safe check
Remove unused form_name
Change html_auto_encode to safe_query