Now handles a csrf field of type String instead of type Integer.
Authored by: keess 2017-04-19
Parent: [r2991]
Child: [r2993]