patternfly: removing hardcoded csrf token from pxt pages