dash in the selector value, so that needs to be `meta[name='csrf-token']`