Use correct tag-braces for CSRF token.