added support for pyramid csrf protection