Use null_session for protect_from_forgery
Add type_field create functionality