adjust sequence

Make it the same as https://github.com/expressjs/csurf/blob/master/index.js#L108