Simpler CSRF middleware for Rack.