title: With Spring Security 3.2.0.RELEASE, how can I get the CSRF token in a page that is purely HTML with no tag libs
body: <p>Today I upgraded from Spring Security 3.1.4 with the separate java config dependency, to the new 3.2.0 release which includes java config.  CSRF is on by default and I know I can disable it in my overridden configure method with "http.csrf().disable()".  But suppose I don't want to disable it, but I need the CSRF token on my login page where no JSP tag libs or Spring tag libs are being used.</p>
  
  <p>My login page is purely HTML that I use in a Backbone app that I've generated using Yeoman.  How would I go about including the CSRF token that's contained in the HttpSession in either the form or as a header so that I don't get the "Expected CSRF token not found. Has your session expired?" exception?</p>