SEC-2269: Fix markup for CSRF link