Working forms, addinng simple delete form to avoid CSRF