[client][tornado] Protection XSRF is enabled (#187)