auto adding the AntiForgeryPolicy.  Closes GH-4
validator will also look at the headers for the key too.  Closes GH-5