Use numeric csrf tokens.