Defines a hidden text field used for CSRF
NOTE: While CSRF is not required for HXML, you can use this if your routes do require a CSRF token