Add back csrf in home.html