[warehouse] csrf token as module constant