private function registerRoutes(ConfigRepository $repository) {
        // ...
        /** @var \App\Http\Kernel $kernel */
        $kernel = $this->app->make(Kernel::class);

        if (property_exists($kernel, 'middleware')) {
            $property = (new \ReflectionObject($kernel))->getProperty('middleware');
            $property->setAccessible(true);

            $property->setValue($kernel,
                $this->injectCsrf(
                    $property->getValue($kernel)
                )
            );
        }
        // ...
    }

    private function injectCsrf(array $middleware) {
        $result = [];
        $injected = false;

        foreach ($middleware as $item) {
            if (!$injected && $item === 'App\Http\Middleware\VerifyCsrfToken') {
                $result[] = CsrfInjector::class;
                $injected = true;
            }

            $result[] = $item;

            if (!$injected && $item === StartSession::class) {
                $result[] = CsrfInjector::class;
                $injected = true;
            }
        }

        return $result;
    }