Make sure csrf tokens match on client and server.