diff --git a/app.py b/app.py
index c0083ec..b994d93 100644
--- a/app.py
+++ b/app.py
@@ -189,6 +189,8 @@ class Page(BaseModel):
     @property
     def prop(self):
         return PagePropertyDict(self)
+    def is_editable(self):
+        return not self.is_locked
             
 
 class PageText(BaseModel):
diff --git a/templates/edit.html b/templates/edit.html
index 0510a1c..9de2fd4 100644
--- a/templates/edit.html
+++ b/templates/edit.html
@@ -32,6 +32,7 @@
 {% endif %}
 
 <form method="POST">
+  <input type="hidden" name="csrf_token" value="{{ csrf_token() }}" />
   <div>
     <label for="title"><span class="material-icons">link</span> /</label>
     <input type="text" name="url" class="url-input" placeholder="(No URL)" maxlength="64" value="{{ pl_url or '' }}">