Pass category selection value into hidden form input
Added route specific CSRF protection; clean-up