No need to check this on add/edit, because there is alread CSRF-checking in the form.