Include flash object to persist data past exactly one request/response cycle
Add CSRF token generation and authentication to base controller class