Csrf form element now uses the SessionManager which comes from the ServiceLocator