Added header CSRF/XSRF protection for requests.