Added CSRF fix
Created CreateProduct controller, added Tom's fix