Added csrf protection using plone.protect