Use {{ form.csrf_token }}.

This prevents me from having to manually place a
an input tag in a template.

This bug was fixed by simply using flask's
flask-wtf instead of wtforms to import the Form
class.