reading_list: add CSRF links to reading_list