Issue 361: Include the CSRF token in all forms