<form action="." method="post">{% csrf_token %} ...
See: https://docs.djangoproject.com/en/1.8/ref/csrf/
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/CADut3oAaXtGjzK9repN_waOzn0SsuWkT3Mp5DYhzMWTzosUk3g%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.