/**
  * @inheritdoc
  */
 public function run(Router $router, \Closure $next)
 {
     $this->validateToken($router);
     $response = $next();
     if (is_string($response)) {
         $response = new Response($response);
     }
     if ($response instanceof ResponseInterface && $response->getStatusCode() === 200) {
         $response->addHeader('X-CSRF-Token', $this->getCSRFToken());
     }
     return $response;
 }