If my understanding above is correct, perhaps have a `getTokenProvider` method in this class that, by default, returns `CSRFConf$.MODULE$.defaultTokenProvider()`. It would be easy to override that in a class that extends `RequireCSRFCheckAction ` and provide the custom `TokenProvider`.