Replace csrf-variable with twig-function

It is not required to create it manually within the controller. This makes it even easier to copy&paste this form into for example into the layout.