Remove CSRF field from POST params
Inject resource into template context (for convenience)