Add csrf protect to forms