Add CSRF middleware / context_processor to default settings