Don't emit CSRF by default on frontpage

And remove some more individualized jquery mentions.