You have the option to disable CSRF in forms with https://github.com/luckyframework/lucky/blob/60b24a8f0489d6115063d15ba5974481b02c9abe/src/lucky/tags/form_helpers.cr#L3 If this is disabled, then we should probably also display the metatags as well. https://github.com/luckyframework/lucky_cli/blob/522c046f6cc3306c416a5c5175d589d5fd8bc682/src/browser_app_skeleton/src/components/shared/layout_head.cr#L11