Add csrf token to layout