We should use YII_CSRF_TOKEN name from Yii preferences

Yii developers recomend to change CSRF token name, so we should use it from Yii preferences.