zulip/templates/zerver/app/logout.html

<div class="hidden">
    <form id="logout_form" action="/accounts/logout/" method="POST">{{ csrf_input }}
    </form>
</div>