Config: Enable WTF CSRF protection.