Add CSRF protection to all templates

templates/hr/recommendations/add.html

@@ -11,6 +11,7 @@ The person you are recommending needs to have created their application before y
 <table>
 {{ form.as_table }}
 </table>
+{% csrf_token %}
 <input type="submit" value="Add Recommendation" />
 </form>
 {% endblock %}