{% csrf_token %}

Also written: csrf_token

A template tag that adds the hidden secret field Django needs to accept a POST form. Without it you get `Forbidden (403)`.