Add isCsrfProtectionMethodForNoXhr.

Use github.com/go-utils/uslice.