Inject CSRF token manually.

For some reason,
`{{ form.csrf_token }}`
wasn't working in the forms.