Adding CSRF token to locals