add csrf token to join page; update requirejs dev dependency