Csrf: use the right field and cookie
Add middleware to print exceptions
Implement form post