Add csrf protection against membership form spam