replacing csrf_token to _token

replacing csrf_token to _token to work with latest changes in filters.php which expect the token to be in _token.