Use the SYM_COOKIE_PREFIX for XSRF requests.
Release 2.5.2-rc.1