Fixed req.session._csrf getter property redefinition bug.