Adds flash and non-working CSRF tokens