add csrf token in base page to force django send csrf cookie in every page