Added missing CSRF tag to layout