`xsrfCookieHeader` is not something we add either
# general
r
xsrfCookieHeader
is not something we add either