Support for X-CSRF-TOKEN header (Issue #2)