Added authenticity tokens to prevent csrf.