root/public: links for pyramid-csrf