It is not up to the generic api to decide on CSRF policy. This must be left to client applications

<?php

define('RENKAN_SCHEMA_VERSION', '2');