Make CSRF token available in all client-side templates