Add xsrf header & cookie configuration