Add X-CSRF-Token, token verification.