s3 swat: Add support for anti-XSRF token