Add test to make sure CSRF is added to all forms