Version 2.2.0

• New #68: Add the CsrfHeaderMiddleware middleware to use custom HTTP header to prevent forgery of requests (@olegbaturin)
• Chg #71: Deprecate CsrfMiddleware in favor of CsrfTokenMiddleware (@ev-gor)
• Enh #68: Add the CsrfMiddleware::withSafeMethods() method to configure a custom safe HTTP methods list (@olegbaturin)

Version 2.1.1

• Enh #55: Add support for psr/http-message version ^2.0 (@vjik)

Version 2.1.0

• New #53: Add StubCsrfToken (@hacan359)
• Bug #36: Explicitly add transitive dependencies yiisoft/strings, psr/http-server-handler
  and ext-hash (@vjik, @xepozz)

Version 2.0.0

• Chg #43: Adapt configuration group names to Yii conventions (@vjik)
• Enh #44: Add support of yiisoft/session version ^2.0 (@vjik)