* Allows CSRF cleanup to be turned off for certain strategy types
* Defaults Authenticatable CSRF cleanup