Include CSRF validation talk in Ch7 with Forms

[askedrelic]

to be able to handle POST, you have to setup a real view and handle a csrf_token on POST.