Don't save CSRF token as theme setting.