Attempt to fetch a crumb if CSRF protection is enabled