Opt-in cookie to copy to xsrfHeaderName for same-origin unsafe methods.
final String? xsrfCookieName;