Add Http/CsrfToken header type supporting X-CSRFToken header as alternative to $_POST/$_GET inclusion