Adding configurable CSRF token handler