Also update all samples to use XSRF callback protection. Reviewed in https://codereview.appspot.com/6473053/.