Remove Jinja2 dependency by always setting the CSRF token if the request's endpoint should be protected.
version 0.1.17