[PD-218] Stop duplicate csrf tokens from being generated on initial profile screen

With some guidance from @galitskyd , I changed how the initial profile form is included into the login page, which prevents duplicate csrf tokens from being generated. I'm not able to test that the symptoms from [PD-218] are resolved by this, but my suspicion is that it was being caused by this. Since we don't have SSL installed in a QA environment, I'm not able to test that this resolves that issue until after deployment. 
Warning: big images

QC:
![2014-09-25-153352_1271x1028_scrot](https://cloud.githubusercontent.com/assets/3379265/4411007/0b988f66-44eb-11e4-9e49-f6288e27a9ab.png)
Master:
![2014-09-25-153634_1271x1028_scrot](https://cloud.githubusercontent.com/assets/3379265/4411032/50851388-44eb-11e4-8097-852d4dcd1961.png)