Add xsrfHeader and xsrfCookie options