Remove unnecessary null-safe operator

Fix: forgot-password link in sign-in block broken

CodeStyle

Fix: #4389 - move the CSRF token to the end of all forms, so we can detect truncated input variables