Create a hidden field with the session anti-forgery token as its value.
This ensures that the form it's inside won't be stopped by the anti-forgery
middleware.