Switch too CSRF cookie && Recyle CSRF token on every HTTP GET Request