Switch to WTForms

* Built-in CSRF protection
* Can disable CSRF for testing
* Validators