Find csrf token from headers
Add WTF_CSRF_TIME_LIMIT configuration. Adjust the place for gettting secret key and time limit
Strictly protecting on ssl requests
customize error response handler