Use CSRF token

Use the csrf_token method in templates for customized forms.