CSRF should be removed if it's disabled in forms

[jwoertink]

You have the option to disable CSRF in forms with
https://github.com/luckyframework/lucky/blob/60b24a8f0489d6115063d15ba5974481b02c9abe/src/lucky/tags/form_helpers.cr#L3

If this is disabled, then we should probably also display the metatags as well.

lucky_cli/src/browser_app_skeleton/src/components/shared/layout_head.cr

Line 11 in 522c046

csrf_meta_tags