Use the SYM_COOKIE_PREFIX for XSRF requests.