Make create user form functional. Add CSRF check to form process routes.