Move CSRF route binding into initialize function
This way it takes place *after* the views hook does its bindings, including adding res.view
closes #1983
Merge branch 'master' of github.com:balderdashy/sails