If the CSRF is disabled, also remove the metatags.

[jwoertink]

Fixes #696

This is to coincide with
https://github.com/luckyframework/lucky/blob/22fcb187c2045a36823a03310d1ed68aec5d8f0b/src/lucky/tags/form_helpers.cr#L1C1-L8

[jwoertink]

Just realized that there's this too luckyframework/lucky#1657

So what happens if you disable this, and then submit the form? My guess is it would fail because allow_forgery_protection would still be true 🤔 Would we have to disable that too?