fixed maintenance mode page not working with new CSRF implementation, #2424