Fixed fix_csrf macro so that all forms are updated
Moved csrf fising logic into master.html