CSRF protection utility for framework-free node sites.