Add the CSRF token to index.html