Rename CSRF cookie from default 'csrftoken' to 'esp_csrftoken' to prevent collisions