mattdrayer/api-csrftoken: Include CSRF token in the response payload

CSRF Token is now available via GET /api

@chrisndodge