Add hidden configuration variables for anti-CSRF security token features