Fix csrf failure on login

django-browserid 0.10.1 has a problem where if the browser hasn't picked
up a csrf token, then you can't log in.

This temporarily fixes that by putting a csrf token on the base
template. We can remove this when django-browserid 0.10.2 comes out.