View vars should be hardcoded.
Merge branch 'master' of https://github.com/peec/minibase-plugin-csrfprotection