CSRF protection improvement. Use different tokens for POST and GET
requests.