ignore case in csrfdefender filtering