Supports CSRF token validation for Services 3.4+