pub const CSRF_FN: &'static str;
What a page calls to get its own token: value={csrf()}.
value={csrf()}