Add CSRF protection to register page