Changed csrf-var to csrf-param

Changed csrf-var to csrf-param due to meta validation error. The validation error as mentioned in the issue https://github.com/yiisoft/yii2/issues/2363. It is fixed in this pull request.