Add CSRF token to <head>