Add CSRF protection for reports and posts