Yes I agree. I moved it to the CSRFToken component in my new commit.