Fix quiz submit on page unload when CSRF is enforced

Auto-submit beacons now include the CSRF token, so sites that enforce CSRF no longer reject them.