Add CSRF protection to AuraForm with Aura.Session