For new installations, turn on XSRF by default. For updates, disable it. This is purely for compatibility reasons. RE: #1874