Rename _csrf_token field to _ct at John's request