Added CSRF Headers checks + csrfcookie set