X-CSRF-Token - protectFromForgery

Added support to header "X-CSRF-Token" as Rails does.