Remove csrf token from template tag and reference in the docs the idea of putting in on the body tag

[yaakovLowenstein]

Having it in the tag gets in the way of using hx-headers on the element that uses the template tag

[yaakovLowenstein]

do as setting - so you can have it put in each hx request if want - but make it opt in - otherwise needs to go in body etc (docs definitely need to be updated)

can also add param in hx_post for turning off/on for specific request