Remove "no escape" indicator when injecting request.csrf_tag

No longer necessary since request.csrf_tag now returns a "literal"
Markup string.