Don't include csrf_token in form.data

atst/forms/forms.py

@@ -6,3 +6,9 @@ class ValidatedForm(FlaskForm):
         """Performs any applicable extra validation. Must
         return True if the form is valid or False otherwise."""
         return True
+
+    @property
+    def data(self):
+        _data = super().data
+        _data.pop("csrf_token", None)
+        return _data