Added CSRF protection, improved NewWorkoutForm