Add Secret
Implement CSRFToken in terms of Secret