- [x] All forms need a hidden CSRF field - [x] CSRF fields must be validated Related: https://github.com/dotkernel/frontend/issues/342