settings: Enable CSRF protection middleware.