Add X-CSRF-Token to access control headers

Adding the X-CSRF-Token header to make use of the CSRFGenerateToken() and verifyCSRFToken() functions.