CSRF Tokens were missing in a few places