CSRF prevention

with_imSecureToken

without_imSecureToken