Close tag + add missing csrf_token