Fix #3358 CSRF meta tags specification

Fix #3358 unnesessary meta tags in email html

CSRF meta tags specification reworked to be triggered by `Request` instead of `View`