[PD-218] Stop duplicate csrf tokens from being generated on initial profile screen

With some guidance from @galitskyd , I changed how the initial profile form is included into the login page, which prevents duplicate csrf tokens from being generated. I'm not able to test that the symptoms from [PD-218] are resolved by this, but my suspicion is that it was being caused by this. Since we don't have SSL installed in a QA environment, I'm not able to test that this resolves that issue until after deployment. 
The original include is significantly deeper than an immediate child of body. I suspect there could be the potential for missing styles. How does it look?