Fix CSRF and forbidden attributes problems to allow post creation.