Fix typo in csrf reference
Use empty() instead of html('')