template markup fix: csrf moved to start of form

<input> should not be a child of <tr>, regardless if type="hidden" or not

rosetta/templates/rosetta/pofile.html

@@ -58,10 +58,10 @@ <h1>{% blocktrans  %}Translate into {{rosetta_i18n_lang_name}}{% endblocktrans %
         </div>
 
         <form method="post" action="">
+            {% rosetta_csrf_token %}          
             <table>
                 <thead>
                     <tr>
-                        {% rosetta_csrf_token %}
                         <th><div class="text">{% trans "Original" %}</div></th>
                         {% if main_language %}<th>{{ main_language }}</th>{% endif %}
                         <th>{{ rosetta_i18n_lang_name }}</th>