Just nitpicking here, but should we used camel case even for acronyms (`XsrfHeaderName`) ?