Enable CSRF protection

{{cookiecutter.app_name}}/{{cookiecutter.app_name}}/app.py

...cutter.app_name}}/{{cookiecutter.app_name}}/extensions.py

...r.app_name}}/{{cookiecutter.app_name}}/templates/nav.html