Add csrf meta tags

Done in alaveteli core in d0472b0c7d81ff1182342af22b586a931b055ba4