add controller method and twig extension for easier csrf handle in links