default value is true when you Enable Global XSRF, also can control in
the prepare function to change the value.