Logout link now includes references to CSRF token