luci-app-ddns: protect start/stop actions with csrf token