Update list.html

Check if csrf_token defiened