Fix some issues

app/templates/admin/create_user.html

@@ -18,6 +18,7 @@
       </div>
       <div class="card-body">
         <form method="POST" novalidate>
+          <input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
 
           <!-- ── Identity ─────────────────────────────────────────────────── -->
           <div style="font-size:11px;font-weight:700;letter-spacing:1.2px;text-transform:uppercase;color:var(--muted);margin-bottom:14px;">

app/templates/admin/edit_user.html

@@ -10,6 +10,7 @@
       <div class="card-header"><i class="bi bi-person-gear me-2"></i>Edit: {{ user.full_name }}</div>
       <div class="card-body">
         <form method="POST">
+          <input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
           <div class="row g-3">
             <div class="col-md-6">
               <label class="form-label">Full Name</label>

app/templates/admin/kb_edit.html

@@ -43,6 +43,7 @@
         <form method="POST" enctype="multipart/form-data" id="kb-form"
               data-article-id="{{ article.id if article else '' }}"
               data-atts-url="{{ url_for('admin.kb_get_attachments', article_id=article.id) if article else '' }}">
+          <input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
           <div class="mb-3">
             <label class="form-label">Title *</label>
             <input type="text" class="form-control" name="title" required

app/templates/admin/kb_list.html

@@ -37,6 +37,7 @@
               <a href="{{ url_for('admin.kb_edit', article_id=art.id) }}" class="btn btn-secondary btn-sm" title="Edit"><i class="bi bi-pencil"></i></a>
               <!-- Publish / Unpublish quick toggle -->
               <form method="POST" action="{{ url_for('admin.kb_toggle_publish', article_id=art.id) }}" style="margin:0;">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
                 {% if art.is_published %}
                 <button type="submit" class="btn btn-sm"
                         style="background:rgba(251,191,36,.1);border:1px solid rgba(251,191,36,.3);color:var(--warning);"
@@ -52,6 +53,7 @@
                 {% endif %}
               </form>
               <form method="POST" action="{{ url_for('admin.kb_delete', article_id=art.id) }}" onsubmit="return confirm('Delete this article?');" style="margin:0;">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
                 <button type="submit" class="btn btn-sm" style="background:rgba(248,113,113,.1);border:1px solid rgba(248,113,113,.2);color:var(--danger);" title="Delete"><i class="bi bi-trash"></i></button>
               </form>
             </div>

app/templates/admin/users.html

@@ -61,7 +61,7 @@
               {% if u.id != current_user.id and u.is_active %}
               <form method="POST" action="{{ url_for('admin.delete_user', user_id=u.id) }}"
                     onsubmit="return confirm('Deactivate {{ u.full_name }}?');">
-                <button type="submit" class="btn btn-sm" style="background:rgba(248,113,113,.1);border:1px solid rgba(248,113,113,.2);color:var(--danger);">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>                <button type="submit" class="btn btn-sm" style="background:rgba(248,113,113,.1);border:1px solid rgba(248,113,113,.2);color:var(--danger);">
                   <i class="bi bi-person-dash"></i>
                 </button>
               </form>