Fix some issues

app/templates/tickets/create.html

@@ -11,6 +11,7 @@
       </div>
       <div class="card-body">
         <form method="POST" enctype="multipart/form-data">
+          <input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
           <div class="row g-3">
             <div class="col-12">
               <label class="form-label">Issue Title *</label>

app/templates/tickets/detail.html

@@ -88,6 +88,7 @@
           {% if current_user.is_it_staff or comment.author_id == current_user.id %}
           <form method="POST" action="{{ url_for('tickets.delete_comment', comment_id=comment.id) }}"
                 onsubmit="return confirm('Delete this comment?');">
+            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
             <button type="submit" class="btn btn-sm" style="background:none;border:none;color:var(--muted);padding:2px 6px;"
                     title="Delete comment">
               <i class="bi bi-trash"></i>
@@ -122,6 +123,7 @@
       <div class="card-header"><i class="bi bi-chat-plus me-2"></i>Add Comment</div>
       <div class="card-body">
         <form method="POST" enctype="multipart/form-data">
+          <input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
           <div class="mb-3">
             <textarea class="form-control" name="body" rows="4" required
                       placeholder="Add your update, follow-up, or response here…"></textarea>
@@ -157,6 +159,7 @@
       <div class="card-header"><i class="bi bi-pencil-square me-2"></i>Update Ticket</div>
       <div class="card-body">
         <form method="POST" action="{{ url_for('tickets.update_ticket', ticket_id=ticket.id) }}">
+          <input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
           <div class="mb-3">
             <label class="form-label">Status</label>
             <select class="form-select" name="status">

app/templates/tickets/notifications.html

@@ -9,6 +9,7 @@
       <div class="card-header d-flex align-items-center justify-content-between">
         <span><i class="bi bi-bell me-2"></i>All Notifications</span>
         <form method="POST" action="{{ url_for('tickets.mark_notifications_read') }}">
+          <input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
           <button type="submit" class="btn btn-secondary btn-sm">
             <i class="bi bi-check2-all me-1"></i>Mark All Read
           </button>