Add crosswalk version to config vars.
Add support for XSS prevention token.