A cached page may include forms, which will then have the wrong authenticity token, so after the page has finished loading we fix up those tokens using the one from the meta tags which will always be correct as we never cache the layout.