Add csrftoken to subscribe_to_bug_alert_do POST

Closes #1356