title: How to optionally change the CSRF name in security class
body: <p>I have post data coming from an external cURL POST.  I do not have the ability to add any custom defined fields to the post back but I can stuff the CSFR token into another empty input for post back to my app.  Is it feasible to do this and then modify the security class to look for the unique input name in _POST data when the expected csfr_token isn't found?</p>
  
  <p>If this solution makes sense then any suggestions on how to implement will be more than appreicated.</p>