public function start($url, $method = 'post', $attributes = array()) { return formTag($url, $method, $attributes) . hiddenTag('csrftoken', CsrfProtector::getCsrfToken()); }