Put the {% csrf_token %} within the <form> tag, as it was breaking things.