insert csrf-param meta to dashboard index.html