Adding CSRF protection using withForm/invalidToken/useToken="true"
in the controllers and views.