Fix CSRF for deleting objects from list