Outputting CSRF token key and value for client-side JS