Use csrf cookie name from settings