this needs a `<meta charset="utf-8">` before this X-CSRF-Token meta element.