Moved csrf field creation out of setupFormHandler so field is always cre...

...ated if token exists

![](http://c3.thejournal.ie/media/2013/12/1368351860_facepalm-426809-2.gif)