Added cross-scripting field to auth form.

resources/templates/auth.html

@@ -2,6 +2,7 @@
 {% block content %}
         <div id="content" class="auth">
           <form action="{{servlet-context}}/auth" method="POST">
+            {% csrf-field %}
             <input type="hidden" name="redirect-to" value="{{redirect-to}}"/>
             {% if user %}
             <p class="widget">