Fix syntax error in CSRF HTTP Header