add csrf_token to swingtime forms