Fixing inclusion of _csrf token and field