Function with_csrf_meta 

pub fn with_csrf_meta(document: &str, token: &str) -> String

document carrying token in its head as <meta name="csrf-token">. The meta opens the head, so a page’s own Head: merges over it by identity like every other head element. A document with no <head> is returned as it is.