Add support for rendering validation errors on hidden fields
Add CSRF support to datamanager
Add CSRF protection to comment form