feat(csrf): Sets default header name for CSRF.