Changed the javascript tag and the generated csrf field to conform to html.
Authored by: keess 2013-10-24
Parent: [r2569]
Child: [r2571]