Fixed #21495 Added a setting for CSRF Header name

https://code.djangoproject.com/ticket/21495

Thanks wesalvaro for report and initial PR.

I'm missing test(s) and probably docs. I'm not sure what tests to write in `csrf_tests/tests.py`. Feel free to comment.