add csrf

assets/tpl/admin_create_clients.html

@@ -20,6 +20,7 @@
         <h2>Enter valid LDAP user email addresses to quickly create new accounts.</h2>
         {{template "prt_flashes.html" .}}
         <form method="post" enctype="multipart/form-data">
+            <input type="hidden" name="_csrf" value="{{.Csrf}}">
             <div class="form-row">
                 <div class="form-group required col-md-12">
                     <label for="inputEmail">Email Addresses</label>

assets/tpl/admin_edit_client.html

@@ -22,6 +22,7 @@
         {{template "prt_flashes.html" .}}
 
         <form method="post" enctype="multipart/form-data">
+            <input type="hidden" name="_csrf" value="{{.Csrf}}">
             <input type="hidden" name="uid" value="{{.Peer.UID}}">
             {{if .EditableKeys}}
                 <div class="form-row">

assets/tpl/admin_edit_interface.html

@@ -17,6 +17,7 @@
         {{template "prt_flashes.html" .}}
 
         <form method="post" enctype="multipart/form-data">
+            <input type="hidden" name="_csrf" value="{{.Csrf}}">
             <input type="hidden" name="device" value="{{.Device.DeviceName}}">
             <h3>Server's interface configuration</h3>
             {{if .EditableKeys}}

assets/tpl/admin_edit_user.html

@@ -14,7 +14,7 @@
 {{template "prt_nav.html" .}}
 <div class="container mt-5">
     {{if eq .User.CreatedAt .Epoch}}
-    <h1>Create a new user</h1><!-- fix me!!! -.>
+    <h1>Create a new user</h1>
     {{else}}
     <h1>Edit user <strong>{{.User.Email}}</strong></h1>
     {{end}}
@@ -22,6 +22,7 @@
     {{template "prt_flashes.html" .}}
 
     <form method="post" enctype="multipart/form-data">
+        <input type="hidden" name="_csrf" value="{{.Csrf}}">
         {{if eq .User.CreatedAt .Epoch}}
         <div class="form-row">
             <div class="form-group required col-md-12">

assets/tpl/login.html

@@ -19,6 +19,7 @@
             <div class="card-header">Please sign in</div>
             <div class="card-body">
                 <form class="form-signin" method="post">
+                    <input type="hidden" name="_csrf" value="{{.Csrf}}">
                     <div class="form-group">
                         <label for="inputUsername">Email</label>
                         <input type="text" name="username" class="form-control" id="inputUsername" aria-describedby="usernameHelp" placeholder="Enter email">