Renaming Csrf and X-CSRFToken to CSRF and X-CSRF-Token resp.
Removing check for X-API-Token and changing logic for better readability.