Add WTF_CSRF environment variables to config.