Prevent CSRF attacks on "Create project" page

Thanks, melvin @ HackerOne!