feature: csrf protection

system/templates/guilds.delete_guild.html.twig

@@ -20,6 +20,7 @@
 						<tr>
 							<td>Are you sure you want delete guild <b>{{ guild.getName() }}</b>?<br/>
 								<form action="?subtopic=guilds&guild={{ guild.getName() }}&action=delete_guild" method="post">
+									{{ csrf() }}
 									<input type="hidden" name="todo" value="save"/>
 									<input type="submit" value="Yes, delete"/>
 								</form>
@@ -34,6 +35,7 @@
 <br/>
 <div style="text-align:center">
 	<form action="?subtopic=guilds&guild={{ guild.getName() }}&action=manager" method="post">
+		{{ csrf() }}
 		{{ include('buttons.back.html.twig') }}
 	</form>
-</div>
+</div>