Replace CSRF token with tokens based on the user's ID.