Fix message on start about unsafe properties

Change boolean reference to an Instance reference for the csrf config property. This satisfies the error about unsafe access to the property.

Merge request reports