Better protect our CSRF cookies.