add csrf_token to convert form

danfairs / django-lazysignup

django-lazysignup is a package designed to allow users to interact with a site as if they were authenticated users, but without signing up. At any time, they can convert their temporary user account to a real user account.

BSD 3-Clause "New" or "Revised" License

410 stars 89 forks source link

add csrf_token to convert form #48

Closed jnoss closed 8 years ago

jnoss commented 8 years ago

This adds {% csrf_token %} to the convert form template, to prevent "Forbidden (403) CSRF verification failed. Request aborted." errors when a user submits the convert form.

danfairs commented 8 years ago

Thanks! We dropped support for non-CSRF Django a long while ago :)