Add a default secret key to the default config for the csrf token
Add form helpers
Update layout for the ACL page
Add code to create a new collection via the website

Add the template
Add the method in the controller (based on the code from the API)