Exporting CSRF token key to locals from middleware.init