add csrf_meta in spree_application layout