Add CSRF protection to all form posts