Bug 857734 - write better csrf error page