Refactor application template

- remove hard favicon link
- add back CSRF meta tag