enable csrf for put, post, delete requests
update forms to include edit delete functions