implement anti-csrf measures in all posted forms

capsulflask/templates/ssh-public-keys.html

@@ -13,6 +13,7 @@
     <form method="post">
       <input type="hidden" name="method" value="DELETE"></input> 
       <input type="hidden" name="name" value="{{ ssh_public_key['name'] }}"></input> 
+      <input type="hidden" name="csrf-token" value="{{ csrf_token }}"/>
       <div class="row">
         <span class="code">{{ ssh_public_key['name'] }}</span>
         <span class="dim">{{ ssh_public_key['content'] }}</span>
@@ -28,6 +29,7 @@
   </div>
   <form method="post">
     <input type="hidden" name="method" value="POST"></input>
+    <input type="hidden" name="csrf-token" value="{{ csrf_token }}"/>
     <div class="row justify-start">
       <label class="align" for="content">File Contents</label>
       <textarea class="expand" id="content" name="content"></textarea>