Csrf token is sometimes filled as an attribute in a rails 6 form

Question

I have a strange case I can not figure out - sometimes a form field is filled with a csrf_token

1. People are enrolling in a group.
2. The form contains enroll[g