Refs #14: revert in-template CSRF fixes in favor of boilerplate