CSRFDefender from Basic flavor.
Validate xsrf token by default.
Enable xsrf-token.js by default.