templates/confirmation: add csrf token
templates/confirmation: prepare template for form validation

Still missing the server side.