hide current_user auth Token under meta tag