added csrf token to templates.