csrfField = (req) =>
  input({
    type: "hidden",
    name: "_csrf",
    value: req.csrfToken ? req.csrfToken() : req,
  })
Injects hidden input "_csrf" for CSRF token
@param {object} req
@returns {input}