Make csrf token of login page available via header

To be used for stress tests.