Optimized login form - delegated CSRF token creation to thymeleaf