add csrf token to some forms

fix #53
remove trailing whitespace