Default form.csrf_protection.enabled to csrf_protection.enabled