[FIX] Do not use CTOKEN if CSRF disabled

* [FIX] Workers page not checking for CTOKEN properly

Fixes #1848 once merged.
Merge pull request #1849 from MPOS/ctoken-missing

[FIX] Do not use CTOKEN if CSRF disabled