This looks like something we want to be doing on every page. If that is the case, we should consider making a ``csrf.js`` module and ``init`` it in the ``global_scripts`` block of ``base.html``.