Fix message on start about unsafe properties

Change boolean reference to an Instance reference for the csrf config property. This satisfies the error about unsafe access to the property.

merged