add csrf meta tags to fix logout issues