refactor to use csrf-tokens@~1.0.2
1.2.1