apache 2.x.x module, for CSRF mitigation