Allow debug CSRF token validation to be permanent