Add _csrf token to login form