added CSRF token check to form class