Better to use method `$this->request->param('_csrfToken');` so that one doesn't get error if the key is not set.