refactor: migrate ENABLE_CROSS_DOMAIN_CSRF_COOKIE off FEATURES-as-dict