form/csrf: Set the csrf element decorators in the element not in the form