[PD-218] Stop duplicate csrf tokens from being generated on initial profile screen

With some guidance from @galitskyd , I changed how the initial profile form is included into the login page, which prevents duplicate csrf tokens from being generated. I'm not able to test that the symptoms from [PD-218] are resolved by this, but my suspicion is that it was being caused by this. Since we don't have SSL installed in a QA environment, I'm not able to test that this resolves that issue until after deployment. 
Look yourself: http://10.10.12.112:8000 :-)