Added CSRF code to forms, enabled CSRF and AJAX attack checking in __construct in BaseController