Support new CSRF token API.