Added correct ID's to views. Also removed unused/empty view.
Added route protection for products.
Added CSRF protection to all POST methods.