Revert "Move janky csrf token stuff into auth.local"

This reverts commit e942b1268611006befeeea1ebb849899dd9d0521.