Update login.phtml

added csrf for version 1.8