Fixed CSRF generator for forms.