Add CSRF tokens and code.