CSRF protection framework.