protected function getDefaultHttpHeaders() { return array_merge($this->requestHeaders, $this->getContentTypeHeader(), ['Host: ' . UrlBuilder::HOST, 'X-CSRFToken: ' . $this->csrfToken]); }