[fix] Typo in csrf property.