Leave WTF_CSRF_ENABLED alone! :octopus:

@jhladky