Using X-XSRF-TOKEN in HTTP header for user authentication.