Add predicate to check CSRF token
Add custom HTTPNotFound message

This way it doesn't bubble up to the top level, and accidentally have
the main template returned.