Add CSRF to all render routes.