Add PSGI env to xsrf_detected arguments

- The env might be missing for a reason?