Added CSRF fields to mod/admin templates

templates/moderator/admin_reset.html.ep

@@ -18,5 +18,6 @@
     <%= label_for password => 'Password' %>
     <%= password_field password => (id => 'password') %>
   </div>
+  <%= csrf_field %>
   <button type="submit" class="form-button">Reset</button>
 </form>

templates/moderator/create.html.ep

@@ -26,5 +26,6 @@
     <%= label_for password => 'Password' %>
     <%= password_field password => (id => 'password') %>
   </div>
+  <%= csrf_field %>
   <button type="submit" class="form-button">Create</button>
 </form>

templates/moderator/demote.html.ep

@@ -10,5 +10,6 @@
     <%= label_for email => 'Email' %>
     <%= email_field email => (id => 'email', autofocus => undef) %>
   </div>
+  <%= csrf_field %>
   <button type="submit" class="form-button">Demote</button>
 </form>

templates/moderator/lock_acct.html.ep

@@ -10,5 +10,6 @@
     <%= label_for email => 'Email' %>
     <%= email_field email => (id => 'email', autofocus => undef) %>
   </div>
+  <%= csrf_field %>
   <button type="submit" class="form-button">Lock</button>
 </form>

templates/moderator/login.html.ep

@@ -12,11 +12,12 @@
   </div>
   <div class="form-field">
     <% if (my $error = validation->error('password')) { =%>
-    <p class="field-with-error">Must be between <%= $error->[2] %>
-      and <%= $error->[3] %> characters.</p>
+    <p class="field-with-error">Must be atleast <%= $error->[2] %>
+      characters.</p>
     <% } =%>
     <%= label_for password => 'Password' %>
     <%= password_field password => (id => 'password') %>
   </div>
+  <%= csrf_field %>
   <button type="submit" class="form-button">Login</button>
 </form>

templates/moderator/mod_reset.html.ep

@@ -10,6 +10,7 @@
     <%= label_for password => 'Password' %>
     <%= password_field password => (id => 'password', autofocus => undef) %>
   </div>
+  <%= csrf_field %>
   <button type="submit" class="form-button">Reset</button>
 </form>
 

templates/moderator/promote.html.ep

@@ -10,5 +10,6 @@
     <%= label_for email => 'Email' %>
     <%= email_field email => (id => 'email', autofocus => undef) %>
   </div>
+  <%= csrf_field %>
   <button type="submit" class="form-button">Promote</button>
 </form>

templates/moderator/unlock_acct.html.ep

@@ -10,5 +10,6 @@
     <%= label_for email => 'Email' %>
     <%= email_field email => (id => 'email', autofocus => undef) %>
   </div>
+  <%= csrf_field %>
   <button type="submit" class="form-button">Unlock</button>
 </form>