Exception class raised when :csrf_failure option is :raise and the Sec-Fetch-Site header is not considered valid.