add csrf token to sign up form on homepage; fix #58