create_teacher: cross site request forgery protection