Add csrftoken to subscribe_to_bug_alert_do POST

Closes #1356
should be `csrf_token`