Ensure a csrf cookie is actually set.