{# data-csrf-lazy: the token below is filled from /csrf/ on first interaction.
Rendering here would set a csrftoken cookie, and nginx
stores no response that carries one -- the whole page would then be rebuilt
by Django for every anonymous visitor. See ADR-035. #}
