{% macro field() -%}
  <input type="hidden" name="csrf" value="{{ request.session.csrf }}">
{%- endmacro %}