[PD-218] Stop duplicate csrf tokens from being generated on initial profile screen

With some guidance from @galitskyd , I changed how the initial profile form is included into the login page, which prevents duplicate csrf tokens from being generated. I'm not able to test that the symptoms from [PD-218] are resolved by this, but my suspicion is that it was being caused by this. Since we don't have SSL installed in a QA environment, I'm not able to test that this resolves that issue until after deployment. 
Fixed. Even better actually...

QC:
![2014-09-25-160352_1148x1056_scrot](https://cloud.githubusercontent.com/assets/93686/4411532/adc1d0dc-44ef-11e4-9636-4ef8750c4fe7.png)
Master:
![2014-09-25-160438_1148x1056_scrot](https://cloud.githubusercontent.com/assets/93686/4411534/b4fafd4c-44ef-11e4-88fe-b08fcd331756.png)