Add CSRF checks on all forms.
Add basic authentication library.