Check common headers for CSRF tokens as well
Improved wrap-anti-forgery docstring