CSRF token with customisation
Bugfix for CSRF field when combining with EAV attributes