Changed HTTP Header name for CSRF protection