Resolve "code of conduct confirmation needs token, otherwise 403."

What does this mr do?

See #705 (closed) for a description and screencast.

Actions taken to fix bug

Adds CSRF to fetch.

Before

After

Works as intended.

Does this MR meet the acceptance criteria?

• I adhere to the style guide.

Closes #705 (closed)