find csrf_token field if form has prefix