add code of form subject to csrf (works with commit from arachni-plugin)